6. Client Permissions

Original article 16: fat Liu (reprinted please indicate the author and the source, thank you)

6. Client Permissions

This article describes the commonly used role-based permission control design method. If you have a better design, please feel free to provide it. The core idea of "Role-Based permission control" is to control permissions through the roles of the parties, and the parties themselves do not directly bind permissions. The Design of directly binding permissions by the parties is not covered in this article. The design philosophy is as follows: first, register all functional modules and code during system development, during system operation, the system administrator maintains the role list and sets accessible modules (associated roles) for each role ). After the business personnel log on to the system, the system recursively reads all the roles that the current user belongs to, recursively reads all the module resources that these roles can access, and forms a module code list, stored as a global variable of the CS system or session of the bs system. Every time a user tries to enter a function module, the system determines whether the current module code is included in the "module code list. If yes, determine whether the "deny" attribute exists. "deny" takes precedence over "Grant ". If you do not have the "deny" attribute and only the "authorize" attribute, it indicates that the user has the permission to access it. Otherwise, it indicates that the user is not authorized to operate this function module, and the program prompts that the permission is insufficient, and exit. To implement permission control. The figure is as follows: I have also left a small tail about "diet". Now I have completed it. ^ for a while, I have been thinking that our Chinese food culture has a long history and Chinese restaurants are all over the world, why isn't there a world-renowned food brand like KFC or McDonald's? The answer is: our Chinese dishes cannot be mass-produced, and the food culture emphasizes varieties and patterns too much. Moreover, the more upscale the rare food, the more complicated the cooking technology is, the more you rely on the individual cooking capabilities of a specific cook! This situation is not conducive to the widespread spread of food. Many of the delicacies are the only one in this one and the shard branch. If you have a crush on a dish, you can only eat it in his shop. Other restaurants certainly have different tastes even if they have dishes of the same name. For diners, even if the peach feast of the mother-in-law of the queen-mother-in-law is hard to eat, they will lose interest after a long time. For restaurants, the more varieties, the more complicated the cooking technology, the more difficult it is to produce data. The individual's abilities are limited. How many dishes can a cook? How many other people can taste it? What kind of reputation does it have? How can we spread the world? In contrast, KFC and McDonald's have a few similar foods, but all of them are mechanized production with strict production techniques and standards, after training, the style, appearance, and taste of the food made by the "Chef" (I think it is better to call a machine operator) are all the same, any branch in any city can enjoy the same experience. Throughout the world, brands such as Coca-Cola, Pepsi, KFC, McDonald's, and Windows operating systems ...... All features are low variety and mass production. Domestic food and beverage industry meets the "low variety, mass production" standard, I personally feel that it is the "Four Seasons noodles" of Shenyang ". I used to live in the Spring Garden Community in Dongling district of Shenyang City (I moved to Beijing three years ago). There was a "Four Seasons noodle" near the community, which met the above standards. Not only the variety of hotel services, but even the hotel itself can be produced! For a while, I have always had the idea that we can bring four seasons of noodles from Shenyang to Beijing, and one day we will be able to access all of China and the world based on my ideas. Unfortunately, my personal limited funds have contributed to the mortgage and I don't know when I will get what I want! In this chapter, the first part of "common database model analysis"-"People and organization" ends here. Make a notice: the second part of this chapter focuses on the "product" model, the third part is "order", the fourth part is "sales and delivery", and the fifth part is "procurement ", the sixth part is finance. Stay tuned.